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Who  Are  We? 


We  are  the  Program  Managers  for  DoD  Information 
Assurance  (IA)  and  Network  Operations  (NETOPS) 
capabilities  that  provide  responsive,  secure,  and 
interoperable  net-centric  solutions  necessary  to 
secure  and  operate  the  Global  Information  Grid 
(GIG)  in  support  of  the  Secretary  of  Defense, 
Combatant  Commanders,  Joint/combined  task 
forces,  Services,  and  Agencies. 
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What  Do  We  Do? 


*  We  ensure  effective  and  efficient  application, 
planning,  programming,  budgeting,  and  execution  of 
I A  resources 

*  We  develop,  acquire,  and  implement  enterprise  wide 
Computer  Network  Defense  (CND)  and  IA  security 
products  and  solutions  that  identify  threats  to  the 
GIG,  sense  network  and  host-based  attacks, 
develop/disseminate  countermeasures  and  provide 
situational  awareness  for  GIG  NetOps  personnel. 

*  We  provide  secure  and  reliable  identity  management 
services  for  DoD  applications  and  systems. 

*  We  provide  cross-domain  information  sharing 
solutions  for  users  anywhere  on  the  GIG. 
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Contract  Options 


*  IASSURE  Vehicle  expired  in  Jan  08 

-  Need  to  recompete  over  200  Service  Contracts  in 
FY09/10 

•  ENCORED 

-  26  Primes  (Small  and  Large) 

-  Performance  Based  Task  Orders  for  Services  and 
limited  support  related  hardware  and  software 

-  Just  awarded  for  multiple  option  years 

•  GSA 

-  Hardware/Software 

-  Vendor  needs  to  have  a  GSA  Schedule  to  be  eligible 

*  Other  potential  options  for  Service,  Hardware  & 
Software 

-  NetCENTS,  ITES  2S/H,  NASA  SEWP.... 

-  Small  Business  set  asides 
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Possible  Enterprise  Acquisition 

Strategy 

Execute 
Option(s) 


Contract  Award 
(initial  Base  for 
Pilot) 


Operational 

Environments 
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Increases  the  opportunity  to  deliver  the 
right  operational  capability  to  the 
Warfighter 


WS/L  We  Need  Your  Help 


•  To  acquire  enterprise-level  capabilities  that  are 
easier  to  implement  across  DoD 

•  To  understand  the  market  space  and  develop 
innovative  ways  to  scope  costs  related  to  the 
actual  usage 

•  To  implement  and  operationalize  the  capabilities 
that  we  acquire 

•  To  help  us  to  come  up  with  better  ideas  to 
integrate  products  into  a  DoD  suite 

•  To  create  multiple  opportunities  and  awards 
options 
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Scanning 


eEye  Retina 
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DoD  CND  Enterprise-wide  Solutions 

Available  Now... 


Antivirus  Products 


VinttScan  Plu* 


AntiVirus 

\ 


McAfee 


Symantec 
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Remediation 


Citadel  Hercules 
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Wireless 


Flying  Squirrel 


Host  Security 


McAfee 
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On-Going  Projects 


CND  User  Defined  Operational 
Picture 

-  Provides  network  defenders  a 
synchronized  view  of  defensive 
information 

-  Development  effort 

-  FY09  -  No  new  acquisition  activity 

GIG  Common  Operational  Picture 

-  Provides  network  operators 
situational  awareness  of  the  Global 
Information  Grid 

-  Development  effort 

-  FY09  -  No  new  acquisition  activity 

Joint  CERT,  Joint  Threat  Incident, 
and  DoD  CERT  Databases 

-  Provides  centralized  collectors  and 
management  databases 

-  Development  effort 

-  FY09  -  No  new  acquisition  activity 

Wireless 

-  Provides  wireless  (802.1 1) 
detection  and  location 

-  Currently  a  GOTS  deployed 
solution 

-  FY09  -  No  new  acquisition  activity 
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On-Going  Projects  (cont) 


Security  Information  Manager 

-  A  system  that  collects,  aggregates, 
and  normalizes  intrusion  and 
defensive  information 

-  FY09  -  sustainment  of  services 
and  licenses 


Demilitarized  Zones 

-  Relocate  publicly  accessible 
servers  to  the  NIPRNet  edge  in 
controlled  DMZs 

-  FY09  -  sustainment  of  services 
and  licenses.  Limited  new  expansion 


Antivirus 

-Capability  and  tools  to  protect 
computer  from  compromise,  detect 
infected  systems,  clean  infected 
systems,  and  prevent  further 
contamination  from  those  threats  to 
DoD. 

-  FY09  -  No  new  acquisitions 


WS/L  New  Acquisition  Activities 


Host  Based  Security  System 

-  Deploys  and  manages  host  based 
intrusion  sensors,  defensive 
capabilities,  and  INFOCON  actions 

-  FY09  -  New  capabilities:  Asset, 
Configuration,  and  Vulnerability 
control  and  management.  Look  at 
follow-on  capability.  (Contract(s) 
TBD) 

Technical  Media  Analysis  Tool 

-  Forensics  analysis  tool  to 
determine  attack  information 

-  Targeted  DoD  user  group 
(LE/CI/Network  Defenders) 

-  FY09  -  Initial  acquisition  (ENCORE 
II  Contract  Vehicle) 


Insider  Threat 

-  Detect  potentially  malicious  activity 
by  users  within  the  DoD  community. 

-  Fielding  a  current  capability 

-  Analyzing  the  existing  gap  to 
determine  future  acquisitions 

-  FY09  -  Market  Research  and 
requirements  development 


Network  Access  Control 

-  Provides  an  enclave-level  Network 
Access  Control  (NAC)  system  to 
restrict  classified  network  access  to 
known  and  securely  configured 
devices 

-  FY09  acquisition  (ENCORE  II 
Contract  Vehicle) 


P^^New  Acquisition  Activities  (cont) 


Enterprise  Sensors 

-  Centralized  buy  of  COTS  sensors 
for  DoD  Combatant  Commanders, 
Services,  and  Agencies 

-  FY09  -  maintain  previously 
purchased  licenses  and  acquires 
new  capability  (Vehicle  -  GSA, 
Hardware/Software  vehicles) 

Secure  Configuration  Compliance 
Validation  Initiative 

-  Scans  and  automatically  identifies 
configuration  vulnerabilities 

-  FY09  -  Recompete  for  a  follow-on 
capability  (Vehicle  TBD) 

Web  Content  Filtering 

-  Capability  to  filter  malicious/ 
undesirable  web  traffic  at  the  DoD 
NIPRNet  to  Internet  interfaces 

-  FY09  -  Limited  Deployment  and 
pilot  activities  (ENCORE  II) 
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FY09  Acquisition  Activities 
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Way  Ahead 


*  Increased  vendor  participation  in  Market 
Research  and  acquisitions  (Vendor  days  and 
demonstrations) 

*  “Brainstorming”  events  to  encourage  both 
Government  and  industry  innovation 

*  Emphasis  on  implementation  of  solutions  - 
reduce  the  deployment  time 


Assured  Mission  Execution 
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